Vulnerabilities

TI-2009-02514 CVE-2009-2631 · GHSA-jvhh-4rp5-cfmm

Clientless SSL VPN products break web browser domain-based security models

LOW 38

Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SSL VPN and SonicWALL SSL VPN; SafeNet SecureWire Access Gateway; Juniper Networks Secure Access;…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04823 Published 2009-12-04 No fix listed CWE-284

TI-2004-00068 CVE-2004-0081 · GHSA-pcwf-qwvv-qjg3

OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows…

LOW 33

OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07229 Published 2004-03-18 Fixed

TI-2004-00066 CVE-2004-0079 · GHSA-xcj5-xcx2-vvvv

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c…

MEDIUM 51

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.09537 Published 2004-03-18 Fixed CWE-476

Vulnerabilities

Filters

Clientless SSL VPN products break web browser domain-based security models

OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows…

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c…